CVE-2014-0862

The CVE-2014-0862 entry concerns an unspecified remote-code-execution vulnerability in Jazz Team Server used by IBM Rational CLM components. Relevant fixed versions, per connected advisories, are: CLM 4.x before 4.0.6; CLM 3.x prior to 3.0.1.6 iFix 2. IBM advisories note CLM components affected i...

CVE-2014-0862: Undefined Security Weakness

Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management CLM 3.x before 3.0.1.6 iFix 2 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-5450

IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token...

Authentication flaw

IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token...

CVE-2013-5450

IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token...

CVE-2013-5450

CVE-2013-5450 affects IBM Security AppScan Enterprise versions 8.5 through 8.7.0.1 when Jazz authentication is enabled. The root issue is an improperly protected URL that can be leveraged in a man-in-the-middle scenario to obtain sensitive information or modify data by obtaining a session token. ...

PT-2013-5548

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Enterprise versions 8.5 through 8.7.0.1 Description The issue allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token when Jazz...

CVE-2013-5450: Undefined Security Weakness

IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token...

CVE-2013-5430: Undefined Security Weakness

The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable...

PT-2013-5539

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Enterprise versions 8.0 through 8.7 Description The issue concerns a default username and password in the Jazz Team Server component, which can be exploited by remote authenticated users to gain unspecified access. This ca...

Information disclosure

IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof Jazz Team servers, obtain sensitive information, and modify the client-server data stream via a crafted certificate...